P.K. SHARMA

Cyber security intelligence, AI governance, practitioner analysis

Google expands Android scam defences across Messages, calls and screen sharing

Google's October update combines optional cloud-assisted message analysis, on-device link checks, screen-share masking and call-forwarding warnings. The features have different release dates and device requirements; Google's headline detection counts and commissioned comparison need careful reading.

By Parminder Kumar Sharma · · 5 min read

Conceptual smartphone showing a generic call warning shield

Four different defences, four different boundaries

Google announced new Android anti-scam protections on 14 October, spanning conversations, links, live screen sharing and phone-call forwarding. The release is a collection of distinct controls rather than a single switch that instantly reaches every Android phone. Its most consequential change is an opt-in Enhanced protection mode in Google Messages: Google says this can use cloud Gemini models within Private AI Compute to assess complex conversations with an unknown sender, while on-device Gemini Nano helps judge unfamiliar links with real-time web signals.

Google also says Android will mask login and payment fields during screen sharing in Chrome and Android WebView, and will block apps from quietly enabling call forwarding. A warning is planned when a user is led to type a forwarding code manually. Device and timing footnotes change the practical story: cloud-enhanced Messages protection rolls out over coming weeks; screen-share masking rolls out this month on Android 15 or later; forwarding protection is due from early December on Pixel and selected other devices.

What is available, and when?

A useful comparison is by threat and deployment boundary, not by a single score. Some features inspect a conversation; others intervene at a permission or screen-display boundary. The announcement's footnotes are especially important for device support.

Google's stated rollout and device conditions as of 16 October 2026; availability varies by device and region.

ProtectionAttack step it addressesStated availability
Enhanced Messages / Private AI ComputeSlow-burn scam conversations with an unknown senderOpt-in; rolling out in coming weeks; supported Pixel 6+, Samsung Galaxy S24+ and selected AICore devices per Google
Gemini Nano link checkNewly registered links not yet in known-malicious URL listsWithin Enhanced protection on Pixel 10+, Samsung Galaxy S26, Z Flip/Fold8 and selected devices
Notification scam alertsSuspicious content before opening a popular chat appAlready on Pixel; expansion through device makers later in 2026
Screen-share maskingCredentials and payment fields exposed during live sharing in Chrome/WebViewRolling out in October on Android 15+
Call-forwarding block and warningApps or dial-pad codes redirecting incoming calls and OTPsFrom early December on Pixel and selected devices

The privacy difference also matters. Enhanced Messages mode uses Google-described secure cloud analysis in Private AI Compute, whereas the link check involves on-device Gemini Nano and live web signals. Google's privacy claim says the cloud-processed data is encrypted and inaccessible to Google. That is the vendor's architecture claim, not an independent audit performed for this article. A user deciding whether to opt in should read the feature's privacy and device notices rather than assume that every new scan is wholly on-device.

How to read the numbers and the comparison with iPhone

Google says Phone by Google and Google Messages flag more than 5 million suspected scam calls and texts each month. That is a volume of alerts, not the number of unique victims protected, scams stopped or losses prevented. Google also cites more than 3 million spoofed calls blocked since June for two Brazilian bank partners. Those are a different period, product pathway and counting unit, so adding the two figures would be meaningless.

A Leviathan Security Group assessment cited by Google compared default, no-cost built-in protections on four specific phones: Pixel 11 Pro, iPhone 18 Pro, Samsung Galaxy S26 and Motorola Razr 2026. The assessment was commissioned and funded by Google. Its conclusion about Android outperformance reflects those tested products and conditions; it does not establish that every Android phone in every region is safer than every iPhone. Google's separate survey involved 4,500 eligible users across the US, Canada and Australia, with a smaller qualified subset answering comparative experience questions. Self-reported scam experience and laboratory feature tests measure different things.

The headline figures answer different questions and should not be combined into an effectiveness rate.

ClaimWhat it countsWhat it does not establish
>5 million per monthGoogle-flagged suspected scam calls and textsUnique victims, successful prevention or financial loss avoided
>3 million since JuneSpoofed calls blocked for two named Brazilian bank partnersWorldwide impact or the effectiveness of all new October features
Four tested phonesDefault built-in protections in a Google-funded assessmentA universal Android-versus-iPhone result
4,500 respondentsEligible users in three countries surveyed by Google/YouGovMeasured real-world prevention across all phone owners

Circle to Search scam guidance is sometimes described alongside the new measures, but Google announced that capability in December 2025. It can provide context for a suspicious message and is also accessible through Google Lens on iOS. It is not one of the newly launched October 2026 protections.

What users should do

Check whether the Messages Enhanced protection option actually appears on your device before relying on it, and decide whether its cloud analysis suits your privacy needs. Keep Android and Google Messages updated, and review new warnings rather than clicking through them reflexively. During a supposed bank call, stop sharing your screen and contact the bank through a known number or its official app. Never enter a call-forwarding code supplied by an unexpected caller. A phone warning is one layer of protection; it cannot verify a caller's identity in every case.

Take this with you

Practical checks

  • Verify which features and dates apply to your handset and country.
  • Review the opt-in Messages setting and its privacy description before enabling it.
  • If a caller asks to view your screen or enter a forwarding code, end the interaction and call back using a trusted route.
  • Treat AI or link warnings as prompts to verify independently, not as an infallible verdict.

Sources and provenance

Primary source: Google's 14 October announcement and device footnotes. The earlier Circle to Search and Lens scam guidance is dated December 2025. Claims about privacy, detection volumes, bank-call blocks and third-party comparison are attributed to Google; this article has not independently audited the products or the commissioned assessment. Read 16 October 2026.

Sources

  1. PrimaryNew Android protections to help keep you safe from mobile scamsGoogleaccessed 2026-10-16
  2. PrimaryUse Circle to Search and Google Lens to spot scam messagesGoogleaccessed 2026-10-16

Share this briefing

Know someone who owns this problem? Send it to them.

Related briefings

The briefing, in your inbox

Practitioner analysis of cyber and AI security news. No vendor noise.

How often

Every new briefing in one email, at 7am, or at 7am, 12:30pm and 6pm. Nothing is sent when nothing is new. Unsubscribe any time.